Security Alert: Confirmed Malware

This extension was removed from the Chrome Web Store as malware. Do not install it.Extension: Website Blocker + Productivity Timer

CRITICAL RISKRemoved from Chrome Web Store

Website Blocker + Productivity Timer

ID: hclgegipaehbigmbhdpfapmjadbaldib

Could be malicious

Supported Languages

🇧🇷Brazilian Portuguese

🇨🇳Chinese (Simplified)

🇺🇸English

🇫🇷French

🇩🇪German

🇮🇹Italian

🇯🇵Japanese

🇰🇷Korean

🇸🇮Slovenian

🇪🇸Spanish

🇹🇷Turkish

Extension Info & Metadata

Status

Removed

Version

0.3.5

Size

0.13 MB

Rating

4.1/5

Reviews

1,120

Users

70,000

Type

Extension

Updated

Jun 17, 2025

Publisher Contextual Analysis

Author: https://blog.t5o.me/View Profile
Privacy: Privacy Policy
Help: Help Center
MX records exist: Yes
Domain exists: Yes
Is disposable: No
Is role-based: No
Mailbox exists: Yes
Website: Visit

Total Extensions

Active

Obsolete

Listed

Unlisted

Total Users

70,000

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Stay focused online by blocking distracting websites and tracking time spent on each page.

Website Blocker + Productivity Timer Stay focused. Stay in control. Whether you're a parent guiding your child's screen time, a student aiming to avoid distractions, or a professional looking to stay on task — this all-in-one tool has you covered. 👨‍👩‍👧‍👦 For Parents: ✅ Block access to distracting or inappropriate websites ⏱️ Track how long your child spends on each site 🔔 Enable time-based reminders to encourage healthy breaks 🎓 For Students: ⛔ Eliminate distractions like social media or video sites 📊 See exactly how long you’ve stayed on task 🎯 Build better habits for studying and learning 💼 For Professionals: 📵 Stay focused by limiting access to time-wasting sites 🕒 Track your focus sessions tab-by-tab 🔔 Gentle alerts help you take strategic breaks 💡 Features at a Glance: Inline timer floats on every website Time tracked per tab session One-click site blocking Optional alerts and close/hide buttons Lightweight, secure, and privacy-friendly Regain your focus and take back control of your time — one tab at a time.

User Growth

Showing data from Jan 01, 2022 to Dec 31, 2022

Versions

-12.5%(-10,000 users)

Compared to 3 months ago

1 version released in this period

Rating Count

Total: 1,083 ratings

Average Rating

Current: 4.13 / 5.0-0.01

Extracted Data

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

By severity

Critical4

High0

Medium0

Low1

Versions scanned

Showing 1 of 3 scanned versions with more than one unique finding. Counts are unique findings that include each version.

Extension Version	Code Review Findings
0.3.5 Code review	5

Extension Version	Code Review Findings
0.3.5	5

Files with findings

3 distinct paths — top paths by unique finding count:

js/content.js3
js/background.js1
js/common.js1

S.No.	Category	Severity	File	Summary	Found in Version
1	Code Injection	critical	js/content.js (line 68)	Assigning a remote server's raw response text to an attacker-chosen DOM property (x3) enables HTML injection into any element on any site. If x3 is `innerHTML` or similar, this is equivalent to arbitrary HTML/script i…	0.3.5
2	Data Exfiltration	critical	js/content.js (line 57)	Every page URL the user visits is transmitted to an attacker-controlled host via the `{location.href}` substitution in the fetch template. This is an unauthenticated, continuous exfiltration of the user's full browsin…	0.3.5
3	Remote Code Loading	critical	js/background.js (line 55)	The service worker fetches JSON configuration from an attacker-controlled domain `trackinstallwsb.com/install.php` on startup and every 5 minutes, caching the response in `chrome.storage.local` under key `cf`. The dom…	0.3.5
4	Remote Code Loading	critical	js/content.js (line 51)	Injected at document_start on http(s):///, this fetches attacker-supplied rules (x1=URL regex, x2=CSS selector, x3=DOM property, x4=fetch URL template) from the background script, sends the victim's current URL to t…	0.3.5
5	Tracking	low	js/common.js (line 5)	Legacy Google Analytics tracker (UA-17392775-5) is wired up but the `ga.src` assignment is missing, leaving a dangling script-insertion scaffold. The telemetry-collection intent and the insertion of an external script…	0.3.5

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

URLs

IPv4

IPv6

URLs

View the external URLs this extension communicates with to understand its network activity and data interactions.

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.


clients2.google.com	/service/update2/crx	https://clients2.google.com/service/update2/crx
*	/*	http:///
*	/*	https:///
richclarkdesign.com	-	http://richclarkdesign.com
trackinstallwsb.com	-	https://trackinstallwsb.com/

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

No IP addresses found

2.8 out of 5 · 10 most recent reviews

Text reviews

Positive

Negative

I've been using the Website Blocker + Productivity Timer extension for a few weeks now, and honestly, it's been a game-changer for my productivity. Like many people, I struggle with staying focused when working from home. It’s so easy to “just check” social media or scroll through news sites and suddenly lose 30+ minutes without even realizing it. I tried a few other blockers before, but most of them were either too rigid or just didn’t work reliably. This one, though, strikes a perfect balance. First off, the UI is super clean and intuitive. It didn’t take long at all to set up my blocked websites list, and I really like how I can create different rules for different times of day. For example, I’ve got social media blocked during work hours, but I can still access it during my lunch break. That flexibility makes it feel like a tool, not a punishment. What really sets this extension apart for me is the built-in productivity timer. I love using Pomodoro-style intervals, and being able to block websites automatically while I’m in a focus session is genius. It even has breaks built in so I don't burn out. Another feature I didn’t expect to use as much but now rely on is the inline countdown timer that appears on blocked sites. It gently reminds me why I shouldn’t be on the page, without being aggressive or annoying. That little nudge is surprisingly effective. I also appreciate that the developers clearly thought about user experience — the extension doesn’t slow down my browser, doesn’t require unnecessary permissions, and feels very lightweight. If I could suggest one thing for the future, maybe an optional analytics feature to show how many hours you've saved or how many times you tried to visit blocked sites — kind of like a motivational tracker. But even without that, this extension delivers exactly what it promises.

Axel·21 Jul 2025

Version History

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Code Diff

Compare extension code between any two versions.

0 changed files detected

No comparable text files found between these versions.

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Browse and explore files within this extension package

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Security Alert: Confirmed Malware

Website Blocker + Productivity Timer

Supported Languages

Extension Info & Metadata

Publisher Contextual Analysis

Chrome Web Store Metadata

About this extension

Analytics & Metrics

User Growth

Rating Count

Average Rating

Static Code Security Analysis

Extracted Data

Code Review Findings Summary Across 3 Versions5

Versions scanned

Files with findings

Extracted Indicators (URLs and IPs)

URLs

Contextual Analysis

User Reviews

Version History

Version-to-Version Code Diff

Code Diff

Extension Files

User Reviews

User Growth

Rating Count

Average Rating